Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: 5eLEu8PMzH/QInAxpVdPLIbxg7FyatzXzz66J4Ci6bM=
Subject key identifier: 11:67:D1:C6:60:6D:FC:8F:12:E2:BC:A9:70:E4:81:5E:85:5C:C8:8F
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 019F932460436EF9E63640B377A868F0A8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: 0758
Signing time: Fri 24 Jul 2026 08:01:02 +0000
Manifest this update: Fri 24 Jul 2026 08:01:02 +0000
Manifest next update: Sat 25 Jul 2026 08:01:02 +0000
Files and hashes: 1: AeJUYs8KPvdeXojsNmXjmiR1Wh4.roa (hash: QZQFb9zgvngTfrMDFz4cGmkMiycjMvXPVgZGd4lxN9o=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: GQM45L82dx7f55RJw8J+/YxSj1lhZIK4Ej49Ng4jJYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:60:43:6e:f9:e6:36:40:b3:77:a8:68:f0:a8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Jul 24 08:01:02 2026 GMT
Not After : Jul 25 08:01:02 2026 GMT
Subject: CN=1167d1c6606dfc8f12e2bca970e4815e855cc88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:7e:a2:5f:71:e4:f4:7c:0b:de:6a:1b:54:
57:97:6d:5d:a4:02:34:33:98:4d:a8:25:fe:26:cb:
b7:85:4d:d5:ba:5f:e2:41:34:d3:f4:b1:98:1a:d5:
3f:1b:48:ae:11:6c:7e:ed:48:b9:8a:11:f0:45:45:
4d:9d:d1:73:17:ea:2a:24:ae:9a:ea:99:2a:a9:df:
d0:67:55:3f:50:b6:df:fb:81:07:21:5b:d9:69:4e:
41:5f:4d:22:84:32:5d:50:1b:4c:c8:a5:e4:e0:41:
d7:ae:e5:22:a7:a5:d9:90:e1:01:23:e6:a6:b6:51:
e7:53:88:d8:7c:dc:89:a8:ab:63:41:bb:0b:5b:8f:
c2:e2:2e:57:32:ec:94:b3:d5:6f:3b:6d:5b:69:e2:
1e:9d:aa:24:a4:f9:3a:ff:5a:9d:f1:17:a2:6a:a2:
11:f9:f3:54:38:7e:5f:76:d1:c5:37:ef:bd:9b:b7:
63:31:dc:d8:03:ac:b3:9d:1d:74:65:ee:14:1c:7a:
9d:d2:fd:cc:a3:b1:7e:ab:3a:da:23:0a:fc:bf:74:
51:9c:fc:e1:3f:62:e8:ed:ed:08:75:ea:ec:73:25:
8e:4f:dc:51:c2:c0:27:e8:c2:37:2c:52:73:d1:e7:
7a:d0:14:49:e4:db:89:06:d5:13:27:ac:ce:be:97:
c9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:67:D1:C6:60:6D:FC:8F:12:E2:BC:A9:70:E4:81:5E:85:5C:C8:8F
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:58:6e:36:8d:9c:e9:8a:c1:6e:66:0d:0e:a9:ea:c4:99:36:
39:e4:52:dd:0f:6c:af:c8:01:f8:7d:42:d6:12:7f:5c:2d:a9:
3b:dc:06:a7:40:33:e8:33:d9:3e:0b:fe:fe:a9:38:f4:3e:6d:
27:1f:68:69:e3:d0:e3:fd:8b:10:9a:b5:e8:49:f5:94:f3:8e:
fa:99:a5:89:d1:6a:48:b6:5d:b6:56:87:3f:68:82:97:d9:a2:
da:1b:79:25:e9:f2:c2:91:e6:92:7e:26:ca:5e:d1:d0:e1:89:
2e:88:6f:e7:d6:0f:b1:fe:39:4f:8b:57:16:e5:42:4b:a3:dc:
c7:a7:be:77:bd:74:82:01:7d:db:e9:b5:38:99:e6:5e:77:f1:
eb:5d:36:fe:50:9b:82:20:4c:e9:67:07:15:53:91:7d:bb:a7:
6a:c9:18:c1:0a:57:5b:ff:99:77:53:62:b6:fb:0e:7f:c3:04:
56:cc:32:65:9a:98:a3:d6:27:d0:35:e4:dd:1d:99:1d:89:e7:
ac:c9:bf:40:65:92:fa:95:4f:ab:5d:98:63:0f:30:c0:6c:84:
4f:d7:6c:d6:2d:d1:c4:b0:41:03:b6:64:74:e4:19:00:04:ba:
14:5e:5e:dd:0c:21:f4:96:df:46:49:2b:1e:b4:31:42:c6:34:
ee:b6:84:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:54 2026 by rpki-client